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Art Unit: 2434 

DETAILED ACTION 

1 . Applicant response and amendments received on 10/30/08 have been entered. 

Response to Arguments/Amendments 

2. One of the main issues that applicant raises (in various part of applicant's 
Remarks) is that the prior art discussed in previous rejection does not 

disclose "searching". 

Although this issue is addressed below, the examiner would like to emphasize that 
an ordinary artisan in the art of computer science would readily recognize that data 
essentially consists of a set of bits (0 and 1 s), and in order to interpret different parts 
of the data (different segments in a message, for example) a computing device 
(operating on data) must identify parts/segment of the data representing particular 
values (e.g. token). Locating the particular value inherently involves searching (e.g. 
looking for beginning and/or end of the segment representing the value). This notion 
is clearly illustrated in various fields of computing, including the field of networking 
(see TCP/IP, for example). 

3. As per claim 11, applicant argues that Paila does not disclose that the AAAL 
server (equated to "node") performs any detection of the mobile node 
(equated to "media peripheral") during either action A1 orA2; thus, Palla does 
not teach "detecting by the node when the media peripheral communicatively 
coupled to the node". 

Applicant argument is not found persuasive. Clearly message M2 comprising a 
service request received by a node (AAAL) from a media peripheral (MN) indicates 
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to the node that the media peripheral is communicatively coupled to the node and, 
consequently, the node receiving the message detects when the media peripheral is 
communicatively coupled to the node (see Paila, [0037-0040]). 
4. Additionally, in regard to claim 11, applicant argues that Paila does not 

disclose "acquiring by the node, upon said detection, security data associated 
with a location of previous operation of the media peripheral". Applicant 
(presumably) supports the allegation stating that Paila only discloses a 
"mobile node' (MN) and that "operating the peripheral in peripheral's home 
domain preceding operating the peripheral in a foreign domain" is neither 
inherent nor implicit since the mobile node may successively operating in 
many foreign domains. 

In [0037-0040] Paila clearly discloses that the message M2 includes the home 

domain and authority AAAH. Thus, it appears that the question regarding 
applicant's invention is whether the operating of the peripheral in peripheral's home 
domain before operating the peripheral in a foreign domain (e.g. whether user would 
operate the mobile phone within the area where the mobile phone is 
purchased/registered before the user moves out of the area, e.g. during travel) 
would have been novel (e.g. would be different from the art of record). 
The examiner points out that not only an ordinary artisan in the wireless 
communication would recognize that initialization of media peripherals such as 
mobile devices are frequently completed at the point of purchase (e.g. mobile device 
store) which typically is in the home domain, but also that the initial use frequently is 



Application/Control Number: 10/675,652 Page 4 

Art Unit: 2434 

extended to foreign domain, e.g. during travel. Note, that using the media peripheral 
(mobile device) in home domain followed by the travel and use the media peripheral 
in foreign domain at any point (that is any time that a user comes back home and 
then leaves boundary of home domain) would meet the claimed limitation. Even if . 
somehow, the media peripheral disclosed by Paila, was never used beyond the 
home domain once utilized in home domain, using media peripheral multiple times In 
various domains (home and foreign domains) while home domain being used before 
the foreign domain is old and well known in the art of wireless communication (e.g. 
cell phones are frequently moved to foreign domains when traveled from home) and 
such an implementation would have been obvious to one of ordinary skill In the art at 
the time of applicant's invention given the benefit of cost saving. 
5. As per claims 1, 11 and 18, rejected over Birrell, applicant argues that Birrell 
does not disclose or suggest "searching by the node, for a previously 
acquired security data associated with a location of previous operation of the 
media peripheral" because "the tunnel 140 (or any of its modules-checker 141, 
redirector 142, or proxy 143) does not perform any searching whatsoever" and 
"in addition the only 'security data' being exchanged between the client 110 
and the tunnel 140 are secure tokens, which are being used for purposes of 
authentication the connection." 

Applicant's arguments are not found persuasive. Birrell clearly discloses searching 
by the node, for a previously acquired security data associated with a location of 
previous operation of the media peripheral (searching/identifying a message 
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received from the media periplieral for the previously acquired session token) and 
utilizing by the node, said acquired security data associated with the media 
peripheral and said previously acquired security data to facilitate secure 
communication between the media peripheral in the home and the communication 
network (the token is authenticated by the node and the intranet secure resource 
access is established with client, see Birrell, Fig. 1-3 and col. 4 lines 5-64, for 
example). 

6. Furthermore, as per claim 1, applicant argues that Birrell does not disclose "if 
said previously acquired security data is found: utilizing by the node, said 
acquired security data associated with the media peripheral and said 
previously acquired security data associated with the media peripheral and 
said previously acquired security data to facilitate secure communication 
between the media peripheral in the home and the communication network". 
Applicant suggests that since "the only 'security data' that is being exchanged 
between the client 110 and the tunnel 140 is authentication request and 
tokens... such exchange ... is performed for purposes of authenticating the 
client 110 by the tunnel 140 and granting access to private resources/data" 
thus, "utilizing by the tunnel 140 of acquired security data associated with the 
media peripheral and previously acquired security data (associated with a 
location of previous operation of the media peripheral) to facilitate secure 
communication" is not disclosed by Birrell. 
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This argument is similar to tlie previously addressed. Additionally, the examiner is 
not sure why applicant, as it appears to be the case, believes that using the 
previously acquired security data (the token facilitating secure communication) in 
authentication of the client invalidates the token as the previously acquired security 
data recited in the claim language. More clear explanation is requested. 
Additionally, the examiner points out that Birell disclose that acquired security data 
(the session token) that could be a password is authenticated and the secure 
communication is facilitated (see, Birrell, col. 4 lines 5-64, for example). 
7. As per claims 1,11 and 18 rejected under 35 USC § 103 (a) over Handelman, 
applicant argues that Handelman "searching by the node, for a previously 
acquired security data associated with a location of previous operation of the 
media peripheral" and appears to support to allegation with stating that 
"information that enables billing of the user ...is not associated with any 
location of a previous operation of the STB45" and that "information that 
enables billing of the user is related to the user, rather than to the STP 45". 
Applicant then summarize the "support" stating that "such address is not 
necessarily the location of operation of the STB 45". 
The examiner does not find applicant's argument persuasive and points out that 
even if . in some situations, a user would be wiling to pay for broadcast 
communication utilizing top box (STB) in a home/location that differs from the 
location where the user resides, or if bills were sent to someone else's home than 
users' home, using broadcast communication and receiving billing for the broadcast 
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in broadcast users' home would Inave been obvious and predictable variation well 
known in the art of broadcasting and sending billing information to the user location 
(e.g. home) and, as a result, receiving billing at the location of a broadcast apparatus 
(e.g. STB) would have been obvious given the benefit of efficiency and predictable 
results (see KSR ruling). 

8. The newly introduced claims 29-43, representing the previously objected 
claims 8 and 25, written in the independent form, overcame the prior art. 

9. Claims 1-7, 9-24 and 25-43 have been examined. 

The text of those sections of Title 35, U.S. Code not included in this action can be 
found in a prior Office Action. 

Claim Rejections - 35 USC § 102 

10. Claims 11-17 are rejected under 35 U.S.C. 102(e) as anticipated by or, in the 
alternative, under 35 U.S.C. 103(a) as obvious over Paila (USPN 2004/0072557). 
As per claims 11-13, Paila discloses a method for establishing secure access to a 
media peripheral (MN) via a node (ATT) in a communication network (see Fig. 1, for 
example). 

In Fig. 3 (and associated text) Paila discloses facilitating secure communication 
between the media peripheral and the communication network (Paila, [0053-0055]) 
that includes detecting by the node when the media peripheral is communicatively 
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coupled to the node (action A2 and associated text, for example), utilizing acquired 
by the node, upon said detection, security data associated with the media peripheral 
(M2 includes MN_NAI identifying MN, the home domain and authority AAAH, for 
example, Paila, [0037-0040]) and utilizing security data associated with the node 
(e.g. the AAAL must receive at least some identification of ATT; otherwise sending 
data back to ATT, as indicated by the disclosure of step A8 would not be possible). 

1 1 . Paila does not explicitly disclose that the security data is associated with location of 
previous operation of the media peripheral. However, the main purpose of portable 
devices (such as media peripherals disclosed by Paila) is to operate within the home 
domain. Thus, operating the peripheral in peripheral's home domain preceding 
operating the peripheral in a foreign domain (equating the security data comprising 
MN_NAI value to "a location of the previous operation of the media peripheral"), if 
not inherent, would have been at least implicit. 

12. As per claim 14, Paila discloses transferring said security data to a media exchange 
server (AAAL) coupled to the communication network (action A3). 

13. As per claim 15, Paila discloses authenticating the acquired security data utilizing 
the security data associated with the node (Paila, action A4). 

14. As per claim 16, Paila's disclosure of "attendant merely allows the mobile node's 
traffic to pass the attendant from this moment on" in paragraph [0053]) inherently 
includes registering the media peripheral for subsequent operation in the 
communication network. Otherwise, attendant would not be able to "recognize" the 
mobile node and the process of authorization would have to be repeated. 
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15. However, even if somehow Paila's disclosure was implemented without registering, 
registering devices for subsequent operations are old and well known in the art of 
the networking (stateful firewalls, DHCP, etc.), and it would have been obvious to 
one of ordinary skill in the art at the time of applicant's invention to incorporate 
registering the media peripheral for subsequent operation given the benefit of 
efficiency and fault avoidance. 

16. As per claim 17, distributing data for said registered media peripheral via one or both 
of the node and at least another media peripheral in the communication network 
(Paila, action A9, for example). 

17. Claims 1-3, 6, 10-13, 18-20, 23 and 27-28 remain rejected under 35 U.S.C. 102(e) 
as anticipated by Birell (USPN 5805803). 

Birrell discloses acquiring by the node (Tunnel 140) security data associated with the 
media peripheral (a request for a secure service received from client 110, Birrell, col. 
3 lines 61 -col. 4 line 12, for example). 

18. As per claims 1, 3, 11, 13, 18 and 20, in col. 3 line 61 -col. 4 line 12, Birrell discloses 
as follows: 

"During operation of the arrangement 100, a user of the client computer 110 makes a connection, 
via the network 120, with the tunnel 140 using a public Internet service provider (ISP) such as 
AT&T (.TM.) or Earthlink (.TM.). Alternatively, a computer connected to the Internet at a "cyber- 
cafe" such as Cybersmith (.TM.) can be used. Many other connection mechanisms can also be 
used. 



FIG. 2 and 3 shows the exchange of messages 200 which occur between the client computer 
110, and the components of the tunnel 140 and the resources of the intranet 150 after the 
connection has been established. 
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Initially, the user specifies a private intranet resource to be accessed using the browser 1 1 1 of the 
client 110. The location of the private resource is specified using a URL. The public request 310, 
e.g., "get http://M/P," to access the resource is communicated to the redirector 142 in a message 
201 using the non-secure (public) protocol HTTP. The notation "M/P" indicates some resource 
such as a server, file, Web page, mail message, or the like." 

This reads on acquiring by the node (Tunnel 140) security data associated with the 
media peripheral (a request for a secure service received from client 110). 
In col. 4 lines 18-27 Birrell discloss: 

"(13) At this point, if the client 1 10 is already known to the proxy server, then proceed with 
message 209, i.e., request 370 below. Otherwise, in the case where the client is unknown, the 
redirected browser makes a secure request 330 in a message 203 to the proxy server 143 for the 
desired resource. In the case, where the client 110 is unknown, the proxy server 143 replies a 
message 204 to demand that the user makes an authentication request 205 using the checker 
141 , e.g., a redirect 340 to the checker 141 ." 
This reads on: "searching by the node, for a previously acquired security data" 
associated with a location of previous operation of the media peripheral 
The above Birell's disclosure with teaching in col. 4 lines 27-36: 

(14) In response to the request 205, the checker 141 sends a form 206 to the client computer 
1 10 to allow the user to supply authentication information, for example, a user name and 
password. User identification (ID) is replied (350) in message 207. Alternatively, a secure 
challenge-response authentication can be performed with a cryptographic device, such as a 
cryptokey or smart card, in the user's possession. The name and password can be verified 
against a user database maintained inside the firewall 130." 
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reads on: "if said previously acquired security data is not found, exchanging between 
the node and the media peripheral information associated with the media peripheral, 
while the media peripheral is located in the home". 
Similarly, col. 4 lines 18-27 with 

"As a result of the interchanges with the checl<er 141, the client 
computer can be provided, in step 360, a validation token 299 in message 208. 
The token can be in the form of an X.500 certificate. Alternatively, the token 
299 can be a short-term password to authenticate the user on the HTTPS 
connection. The short-term password might automatically get installed in the 
client 110 as a Web "cookie" as a side-effect of the interchange. The message 
208 also redirects the browser 1 1 1 to further communicate with the proxy server 
143. 

Therefore, in a next message 209, the client send the request for the 
resource plus the token 299 to the proxy server 143. When the proxy server 143 
receives the message, it validates the token 299. If the token is valid, then 
the proxy server 143 behaves as a conventional proxy server. 

The proxy server 143 forwards the authenticated request 210 to the 
specified resource 160 inside the firewall 130 using the non-secure HTTP 
protocol. The resource 160 replies to the request with, for example private 
data, in message 21 1 . The proxy server 143 then forwards the data, using 
secure HTTPS protocol, in a message 212 (step 380). 

Subsequent requests for private resources during the session can be 
handled as follows. The resource is specified in a public message 201 to the 
redirector 142. The redirector replies message 202. The client 1 10 now in 
possession of the token 299 replies message 208 (step 370) causing the further 
interchange of message 210-212 between the proxy and the server controlling the private 
resource 160. " 

as taught in col. 4 lines 37-64, reads on: "if said previously acquired security data is 
found: utilizing by the node, said acquired security data associated with the media 
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peripheral and said previously acquired security data to facilitate secure 
communication between the media peripheral in the home and the communication 
network". 

19. As per claims 2, 6, 10, 12, 19, 23 and 27-28, Birell discloses that the security data 
could be a digital certificate (e.g. col. 4 lines 37-40), if previously acquired security 
data associated with the media peripheral is found, acquiring at least one identifier 
associated with a location of previous operation of the media peripheral (e.g. col. 4 
lines 47-57) and that the exchanged information comprises a previously established 
password (Birell, col. 4 lines 34-35). 

Claim Rejections - 35 USC § 103 

20. Claims 1-4, 6-7, 10-13, 18-21, 23-24 and 27-28 remain rejected under 35 U.S.C. 
103(a) as obvious over Birell (USPN 5805803). 

Birell's disclosure has been discussed above. 

21 . Note that a message 209 sent from the peripheral to the node disclosed in col. 4 line 
47-49 could also be interpreted as an acquired secure data associated with the 
media peripheral and validating the token 299 disclosed in col. 4 lines 49-51 . The 
process of token validation would have inherently involve searching by the node, for 
a previously acquired security data associated with a location of previous operation 
of the media peripheral, and Birell's disclosure in col. 4 lines 50-64 evidences 
utilizing by the node, the acquired security data associated with the media peripheral 
and the previously acquired security data to facilitate secure communication 
between the media peripheral in the home and the communication network. 
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22. Birell's disclosure discusses only the successful authentication of a token within a 
message and does not address the situation when the token authentication fails. As 
a result, in this interpretation, Birell does not disclose that if the previously acquired 
security data is not found the node and the media peripheral information exchange 
information (such as a previously established password). 

However, configuring the system to exchange information between the node and the 
media peripheral if a transaction fails (e.g. the previously acquired security data is 
not found) is old and well known in the art of computer authentication (as also 
disclosed by Birell in col. 4 lines 23-36) and would have been an obvious variation to 
an ordinary artisan given the benefit of enabling an additional authentication. 

23. As per claims 4 and 2, in this interpretation of Birell's disclosure, the proxy server 
143 in the tunnel 140 reads on an exchange media server authenticating the 
acquired security data. 

24. As per claims 6-7 and 23-24, Birell's disclosure of forwards the authenticated 
request to the specified resource in col. 4 lines 52-58 evidences acquiring at least 
one identifier based on the previously acquired security data associated with a 
location of previous operation of the media peripheral. 

25. Claims 1,3, 6-7, 11-13, 18, 20 and 23-24 remain rejected under 35 U.S.C. 103(a) as 
being unpatentable over Handelman (USPub 2004/0016002). 

As per claims 1 , 6-7 ,18 and 23-24, Handelman discloses at least one processor (an 
system processing a client request, e.g. a system comprising headend that includes 
Hardware Configuration Provider Unit 70, Fig. 1 or 2) that acquires security data (a 
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representation of financiai transaction detaiis and/or a payment identification code 
that may be processed to enable billing of the user, [0095]) associated with the 
media peripheral (STB 45); said at least one processor searches for a previously 
acquired security data associated with a location of previous operation of the media 
peripheral (the headend then processes the payment identification code to bill the 
user [0095] clearly discloses that the headend must have some previously acquired 
security data corresponding to the security data. As per location, the examiner 
points out that in addition to some kind of address present in the previously acquired 
security data, which must be present for the user to receive biliing data, which reads 
"a previously acquired security data being "associated" with a location of previous 
operation of the media peripheral, some kind of location of the equipment must be 
present in the system in order for the Hardware Configuration Provider Unit to be 
able to receive data). Handelman discloses that if said previously acquired security 
data is found, said at least one processor utilizes said acquired security data 
associated with the media peripheral and said previously acquired security data to 
facilitate secure communication between the media peripheral in the home and the 
communication network, after successful processing of the data (a successful 
transaction, which inherently would involve at least associating and comparing the 
acquired security data and the previously acquired security data, resuits in data 
being communicated to the media peripheral, e.g. [0099]). 
26. Although Handelman does not explicitly disclose that the billing information is 
associated with an address of the user operating the media peripheral (the user's 
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address). However, an ordinary artisan in the art of billing would recognize that 
including an address of the subscriber (e.g. home address at which the subscriber 
operates the media peripheral) in the billing information, if not inherent, it would have 
been an obvious variation given the benefit of enabling the billing information 
delivery to the subscriber (see Juneau, USPUB 2002/0019739, for example). 
27.Handelman does not disclose exchanging between the node and the media 
peripheral information associated with the media peripheral if said previously 
acquired security data is not found. 

However, Handelman discloses generating a message Indicating a successful 
transaction ([109]) and an ordinary artisan would readily recognize the need for a 
message indicating an unsuccessful transaction (i.e. if said previously acquired 
security data is not found) ability for the client to address the unsuccessful 

transactions (e.g. in order to resolve outstanding payments, addressing the account 
changes and/or discrepancies, etc.). 

The examiner points out that generating a message indicating an unsuccessful 
transaction (e.g. account information invalid) is well known in the art of computing 
and electronic transactions. Similarly, the mechanisms enabling clients 
communicating information to address the discrepancies (e.g. credit card information 
to pay the outstanding payments, update an account information, etc.) are old and 
well known in the art of computing and electronic transactions (e.g. USPN 6546555, 
Internet transactions, etc.). Thus, generating a message indicating an unsuccessful 
transaction and enabling the client to communicating information in order to address 
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an error associated witli the transaction (which reads on: if said previously acquired 
security data is not found, exchanging infomnation associated with the media 
peripheral, while the media peripheral is located in the home) are obvious variations 
that are well known in the art. One would have been motivated to use them 
especially in light of the benefits of these technologies as evidenced by their 
commercial success. (See KSR ruling). 

28. Additionally, as per claim 1 1 , receiving data (e.g. enabling the communication 
between the headend and the STP) reads on detecting when the media peripheral is 
communicatively coupled to the node. Alternatively, receiving pockets comprising 
the security data, which enables to acquire (retrieve) the included security data, also 
reads on detecting when the media peripheral is communicatively coupled to the 
node. 

29. As per claims 3, 13 and 20, the data must be read in order to be processed. 

30. As per claims 28, although Handelman does explicitly recite that the at least one 
processor is one of a computer processor, a media peripheral processor, a media 
exchange system processor or a media processing system it is clear that the 
processor used in the method disclosed by Handelman not only is utilized by a 
computer but also handles media exchange transactions, and the examiner points 
out that assigning a specific name would not affect the functionality of the invention. 

31 .As per claim 12, Handelman does not explicitly teach that security data and the 
acquired security data comprise a device identification (ID). However, Handelma's 
invention is concern with a particular node configuration. Thus, it would have been 
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obvious to an ordinary artisan at the tinne of applicant's invention to include a device 
identification in the said security data given the benefit of specifying the type of the 
device that configuration data is requested and to include the device identification in 
the previous security data given the benefit of ensuring the correctness of the 

request. 

32. As per claims 7 and 24, the examiner considers validating the data (comparing said 
security data with the acquired security data) to read on authentication of the data. 

33. Although, as per claim 1 1 and 18, Handelman does not disclose transferring said 
security data to a media exchange server 

34. Claims 5 and 22 remain rejected under 35 U.S.C. 103(a) as being unpatentable over 
Handelman (USPUB 2004/0016002) in viewof Stallings (William Stallings, "Network 
Security Essentials: Applications and Standards", ISBN: 0130160938, 2000). 
Handelman discloses acquiring the security data and searching for the acquired 
security data as discussed above. 

35. Hadnelman does not disclose authentication the acquired security data. 
Stallings discloses authentication of the acquired security data (Stallings, MAC 
and/or Hash, pg. 49-52). It would have been obvious to one of ordinary skill in the 
art at the time of applicant's invention to include authentication of the acquired 
security data as disclosed by Stalling given the benefit of ensuring data integrity. 
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Conclusion 

The newly introduced claims 29-43, representing the previously objected claims 
8 and 25, written in the independent form, overcame the prior art. 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Peter Poltorak whose telephone number is (571) 272- 
3840. The examiner can normally be reached Monday through Thursday from 9:00 
a.m. to 4:00 p.m. and alternate Fridays from 9:00 a.m. to 3:30 p.m 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kambiz Zand can be reached on (571 ) 272-381 1 . The fax phone number 
for the organization where this application or proceeding is assigned is (571 ) 273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 



/Peter Poltorak/ 
Examiner, Art Unit 2434 
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Supervisory Patent Examiner, Art Unit 2434 



